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Abstract 

Over a finite field ¥ q the (n, d, ^-Reed-Muller code is the code given by evaluations of n- 
variatc polynomials of total degree at most d on all points (of F"). The task of testing if a 
function / : F™ — >• ¥ q is close to a codeword of an (n, d, g)-Reed-Muller code has been of central 
interest in complexity theory and property testing. The query complexity of this task is the 
minimal number of queries that a tester can make (minimum over all testers of the maximum 
number of queries over all random choices) while accepting all Reed-Muller codewords and 
rejecting words that are i5-far from the code with probability 0,(5). (In this work we allow the 
constant in the fl to depend on d.) 

For codes over a prime field ¥ q the optimal query complexity is well-known and known to be 
Q(gr( d + 1 )/w- 1 )l) ! an( j the test consists of testing if / is a degree d polynomial on a randomly 
chosen (|~(d + l)/(<7 — 1)] )-dimcnsional affine subspace of F™. If q is not a prime, then the 
above quantity remains a lower bound, whereas the previously known upper bound grows to 
0( g r(d+i)/(9-9/ P )l) w here p is the characteristic of the field F g . In this work we give a new upper 
bound of (cq) lyd+1 ^ q on the query complexity, where c is a universal constant. Thus for every 
p and sufficiently large constant q this bound improves over the previously known bound by a 
polynomial factor, as we let d — > oo. 

In the process we also give new upper bounds on the "spanning weight" of the dual of the 
Reed-Muller code (which is also a Reed-Muller code). The spanning weight of a code is the 
smallest integer w such that codewords of Hamming weight at most w span the code. The main 
technical contribution of this work is the design of tests that test a function by not querying its 
value on an entire subspace of the space, but rather on a carefully chosen (algebraically nice) 
subset of the points from low-dimensional subspaces. 
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1 Introduction 



In this work we present new upper bounds on the query complexity of testing Reed-Muller codes, 
the codes obtained by evaluations of multivariate low-degree polynomials, over general fields. In the 
process we also give new upper bounds on the spanning weight of Reed-Muller codes. We explain 
these terms and our results below. 

We start with the definition of Reed-Muller codes. Let ¥ q denote the finite field on q elements. 
Throughout we will let q = p s for prime p and integer s. The Reed-Muller codes have two parameters 
in addtion to the field size, namely the degree d and number of variables n. The (n, d, (^-Reed- 
Muller code RM[n,d, g] is the set of functions from ¥ q to ¥ q that are evaluations of n-variate 
polynomials of total degree at most d. 

1.1 Testing Reed-Muller Codes 

We define the notion of testing the "Reed-Muller" property as a special case of property testing. 
We let {¥ q — >• ¥ q } denote the set of all functions mapping ¥ q to ¥ q . A property T is simply a 
subset of such functions. For /, g : ¥ q — >• ¥ q we say the distance between them 5(f, g) is the fraction 
of points of F" - where they disagree. We let 5(f,J~) denote the minimum distance between / and 
a function in T . We say / is <5-close to T if 5(f, J-) < 5 and 5-far otherwise. 

A (k, e)-tester for the property J- C {F™ — > F^} is a randomized algorithm that makes at most 
k queries to an oracle for a function / : ¥ q — > ¥ q and accepts if / 6 J- and rejects / J- with 
probability at least eS(f,J r ). 

For fixed d and q, we consider query complexity of testing the property of being a degree d 
multivariate polynomial over ¥ q . Specifically, the query complexity k = k(d,q), is the minimum 
integer such that there exists an e such that for all n there is a (k, e)-tester for the RM[n,d, g] 
property. (So the error e of the tester is allowed to depend on q and d, but not on n.) 

The query complexity of low-degree testing is a well-studied question and has played a role 
in many results in computational complexity including in the PCP theorem ( |ALM + 98| and sub- 
sequent works), and in the works of Viola and Wigderson jVW08j and Barak et al. [BGH + ll] . 
Many of these results depend not only on a tight analysis of k(d,q) but also a tight analysis of 
the parameter e, but in this work we only focus on the first quantity. Below we describe what was 
known about these quantities. 

For the case when d is (sufficiently) smaller than the field size, the works of Rubinfeld and 
Sudan [RS96] and Friedl and Sudan |FS95] show that k(d,q) = d + 2 (provided d < q — q/p). 
For the case when q = 2 and d is arbitrary, this quantity was analyzed in the work of Alon et 
al |AKK+05j who show that k(d,2) = 2 d+1 (exactly). Jutla et al |JPRZ09| and Kaufman and 
Ron |KR06j explored this question for general q and d (the former only considered prime q) and 
showed that k(d, q) < g TC^+i)/ (<?— _ j n [KR06] it is also shown that the bound is tight (to within 
a factor of q) if q is a prime. However for the non-prime case the only known lower bound on 
the query complexity was k(d,q) > qid+V/ii- 1 ) (which is roughly the upper bound raised to the 
power of (p — l)/p). (In the following sections we describe the conceptual reason for this gap in 
knowledge.) 

In this work we give a new upper bound on k(d, q) which is closer to the lower bound when p 
is a constant and d and q are going to infinity. We state our main theorem below. 

Theorem 1.1 (Main). Let q = p s for prime p and positive integer s. Then there exists a constant 
Cq < 3(/ 4 such that for every d andn, the Reed-Muller code RM[n,d,g] has a (k, 0,(1 / k 2 )) -local tester, 
for k = k(d,q) < c q ■ (2P~ l +p-l) {d+l),{q[p ~ l)) q { - d+i yi. In particular k(d,q) < 3g 4 • (Sq)^ 1 ^ 11 . 
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We note that when p goes to infinity the bound on k(d,q) tends to c q ■ (3q)( d+1 ^ q . We also 
note that the constant c q is not optimized in our proofs and it seems quite plausible that it can 
be improved using more careful analysis. The more serious factor (especially when one considers 
a constant q and d — > oo) is the constant factor multiplying q in the base of the exponent. Our 
techniques do seem to be unable to improve this beyond {2 P ~ 1 + p — l) 1 /^- 1 ) which is always 
between 2 and 3 (while the lower bounds suggest a constant which is close to 1). 

Theorem 11.11 is proved by proving that the Reed-Muller code RM[n, d, q] has a "fc-single-orbit 
characterization" (a notion we will define later, see Definition 12.21 and Theorem 12. 4ft . This will 
imply the testing result immediately by a result of Kaufman and Sudan |KS07| . 

1.2 Spanning weight 

It is well-known (cf. [BHR05] ) that the query complexity of testing a linear code C is lower bounded 
by the "minimum distance" of its dual, where the minimum distance of a code is the minimum 
weight of a non-zero codeword. (The weight of a word is simply the number of non-zero coordinates.) 
Applied to the Reed-Muller code RM[n, d, q] this suggests a lower bound via the minimum distance 
of its dual, which also turns out to be a Reed-Muller code. Specifically the dual of RM[n, d, q] 
is RM[n, n{q — 1) — d — l,q]. The minimum distance of the latter is well-known and is (roughly) 
q(d+i)/{q—i) an( l this leads to the tight analysis of the query complexity of Reed-Muller codes over 
prime fields. 

Over non-prime fields however this bound has not been matched, so one could turn to potentially 
stronger lower bounds. A natural such bound would be the "spanning weight" of the dual code, 
namely the minimum weight w such that codewords of the dual of weight at most w span the dual 
code. It is easy to show that to achieve any positive e (even going to as n — > oo) a (k, e)-local 
tester must make at least w queries (on some random choices), where w is the spanning weight 
of the dual. Somewhat surprisingly, the spanning weight of the Reed-Muller code does not seem 
well-understood. (Some partial understanding comes from |DK00| .). Since for a linear code, the 
spanning weight of its dual code is a lower bound on the query complexity of the code, our result 
gives new upper bounds on this spanning weight. Specifically, we have 

Corollary 1.2. Let q = p s for prime p and positive integer s. Then there exists a constant c q < 3q 4 
such that for every d and n, the Reed-Muller code RM[n, n(q — 1) — d — 1, q] has a spanning weight 
of at most c q ■ (2P" 1 +p- l) (^/foCf 1 )) . q (d+i)/ q < 3q 4 . ( 3g )(d+l)/ ? . 

1.3 Qualitative description and techniques 

Our tester differs from previous ones in some qualitative ways. All previously analyzed testers for 
low-degree testing roughly worked as follows: They picked a large enough dimension t (depending 
on q and d, but not n) and verified that the function to be tested was a degree d polynomial on 
a random i-dimensional affine subspace. The final aspect was verified by querying the function on 
the entire i-dimensional space, thus leading to a query complexity of q l . The minimal choice of 
the dimension t that allows this test to detect functions that are not degree d polynomials with 
positive probability is termed the "testing dimension" (see, for instance, jHSSllj ). and this quantity 
is well-understood, and equals t q ^ = \{d+ \)/{q — q/p)~\- 

Any improvement to the query complexity of the test above requires two features: (1) For some 
choices of the tester's randomness, the set of queried points should span a t q d dimensional space. 
(2) For all choices of the tester's randomness, it should make o(q tq ' d ) queries. Finding such a useful 
subset of Fg turns out to be a non-trivial task. The fortunate occurence that provides the basis for 
our tester is that such sets of points can indeed be found, and even (in retrospect) systematically. 
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To illustrate the central idea, consider the setting ofn = 2, d = q — 1 and q = 2 s for some 
large s. While the naive test would query the given function / : ¥ q — s> ¥ q at all q 2 points, we wish 
to query only 0{q) points. Our test, for this simple setting is the following: We pick a random 
affine-transformation T : ¥ q — > F 2 and test that the function f oT has a zero "inner-product" with 
the function g : ¥ 2 — > ¥ q given by g(x,y) = -((x + y) q ~ l — x q ~ l ). Here "inner-product" is simply 
the quantity Yla peF q (f ° T)(a, (3)g(a, (3). It can be verified that the function g is zero very often 
and indeed takes on non-zero values on at most 3q = 0{q) points in ¥ 2 . So querying f(a,f3) at 
these 0(q) points suffices. The more interesting question is: Why is this test complete and sound? 

Completeness is also easy to verify. It can be verified, by some simple manipulations that any 
monomial of the form x l y 3 with i + j < q has a zero inner product with g and by linearity of the 
test it follows that all polynomials of total degree at most d have a zero inner product with g. Since 
the degree of functions is preserved under affine-transformations, it then follows that f oT also has 
zero inner product with g for every polynomial / of total degree at most d. 

Finally, we turn to the soundness. Here we appeal to the emerging body of work on affine- 
invariant linear properties (linear properties that are preserved under affine-transformations) , which 
allows us to focus on very specific monomials and to verify that their inner product with g is 
non-zero. Specifically, the theory allows us to focus on only the monomials x l y q ~ l and for these 
monomials one can again verify that their inner product with g is non-zero. Using the general 
methods in the theory of affine-invariant property testing, one can conclude that all polynomials 
of degree greater than d are rejected with positive probability. 

Extending the above result to the general case turns out relatively clean, again using methods 
from the study of testing of affine-invariant linear properties. The extension to general n is immedi- 
ate. Extending to other degrees involves some intuitive ways of combining tests, with analysis that 
get simplified by the emerging theory. These combinations yield the query complexity of roughly 
(3q)^ d+1 ^ q . We however attempt to reduce the constant in front of q in the base of this expression 
and manage to get an expression that tends to 2 when p goes to infinity. In order to do so we 
abstract the function g as being the derivative of the function x q ~ 1 in direction y, and extend it to 
use iterative derivatives. This yields the best tests we give in the paper. 

Organization In Section [2] we introduce some of the standard background material from the 
study of affine-invariant linear properties and use the theory to provide restatements of our problem. 
In Section [3] we introduce the main novelty of our work, which provides a restricted version of our 
test while achieving significant savings over standard tests. In Section H] we build on the test from 
the previous section and extend it to get a tester for the general case. 

2 Background and restatement of problem 

We start by introducing some of the background material that leads to some reformulations of the 
main theorem we wish to prove. We first introduce the notions of "constraints" and "(single-orbit) 
characterizations" , which leads to a first reformulation of our main theorem (see Theorem 12. 4H . We 
then give some sufficient conditions to recognize such characterizations, and this leads to a second 
reformulation of our main theorem (see Theorem 12. 131) . 

2.1 Single-orbit characterizations 

In this section we use the fact that Reed-Muller codes form a "linear, affine-invariant property". 
We recall these notions first. Given a finite field ¥ q a property is a set of functions J- mapping F™ to 
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Wq. The property is said to be linear if it is an F^-vector space, i.e., V/, g G J 7 and a G ¥ q we have 
af + g G J 7 . The property is said to be affine-invariant if it is invariant under affine-transformations 
of the domain, i.e., V/ € J 7 it is the case that / o T is also in T for every affine-transformation 
T : F™ given by T(x) = A • x + /3 for ^ G F^ xn , /? 6 F™. It can be easily verified that 

RM[n, d, q] is linear and affine-invariant for every n,d,q. 

The main tool used so far for constructing testers for affine-invarinat linear properties is a 
structural theorem which shows that every linear affine-invariant property that is A;-single charac- 
terizable is also /c-locally testable. In order to describe the notion of single-orbit characterizability 
we start with a couple of definitions. 

Definition 2.1 (fc-constraint, /c-characterization) . A k-constraint C = (a, {Aj}!^) on {¥ q — > ¥ q } 
is given by a vector a = {ct\, . . . , a^) G (¥ q ) k together with r vectors Aj = (Aj,i, . . . X^k) £ F^ for 
1 < i < r. We say that the constraint C accepts a function / : ¥ q n — y ¥ q if X^=i ^i,jf( a j) = f° r 
all 1 < i < r. Otherwise we say that C rejects f. 

Let J 7 C {Fqn — >• F g } be a linear property. A k- characterization of J 7 is a collection of k- 
constraints Ci,...,C m on {F™ — > F g } such that / G J 7 if and only if Cj accepts /, for every 
j G {1, . . . ,m}. 

It is well-known |BHR05j that every fe-locally testable linear property must have a Re- 
characterization. In the case of affine-invariant linear families some special characterizations are 
known to lead to ^-testability. We describe these special characterizations next. 

Definition 2.2 (/c-single-orbit characterization). Let C = (a, {Aj}^ =1 ) be a fc-constraint on {F™ — > 
Fq}. The orbit of C under the set of affine-transformations is the set of fc-constraints {T o C} T = 

|((T(«i), . . . ,T(ctk)), {Aj}^ =1 ) | T : F™ — > F™ is an affine-transformation j. We say that C is a 
k- single- orbit characterization of J- if the orbit of C forms a /^-characterization of J 7 . 

The following theorem, due to Kaufman and Sudan |KS07] . says that fc-single-orbit characteri- 
zation implies local testability. 

Theorem 2.3 (Single-orbit characterizability implies local testability, [KS071 Lemma 2.9]). Let 
J~ Q {F™ — > Fq} be an affine-invariant linear family. If T has a k- single- orbit characterization, 
then T has a (k,Q(l/k 2 )) -local tester. 

In view of the above theorem, it suffices to find a single-orbit characterization of RM[n, d, q] to 
test it. The following theorem, which we prove in the rest of this paper, thus immediately implies 
Theorem 11.11 



Theorem 2.4. Let q = p s for prime p, and let n, d be arbitrary positive integers. Then the Reed- 

Muller code RM[n, d, q] has a k- single- orbit characterization for k < c q - (2 P_1 +p— l) ^■ d+1 '^ q ^ p 1 ^ . 
q {d+l)/q where Cq < 3q 4 

2.2 Constraints vs. Monomials 

One of the main simplifications derived from the study of affine-invariant linear properties is that 
it suffices to analyze the performance of constraints on "monomials" as opposed to general poly- 
nomials. This allows us to rephrase our target (a single-orbit characterization of RM[n, d, q]) in 



We note that as in [KS07] we do not require A to be non-singular. Thus the affine-transformations we consider 
are not necessarily permutations from F™ to F™. 
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somewhat simpler terms. Below we describe some of the essential notions, namely the "degree 
set", the "border set" and the relationship of these to single-orbit characterizations. This leads to 
a further reformulation of our main theorem as Theorem 12.131 Variations of most of the results 
and notions presented in this section appeared in previous works [KS071 IGKSMI iBSTTl IBGM+ 1 lj . 
In all the above works, with the exception of [KS07j . the notions were specialized to the case of 
univariate funcions mapping F q n to F q that are invariant over the set of affine-transformations over 
F q n . In this work we focus on these notions in the context of affine-invariant linear properties over 
the domain F q . 

Let J- C {F q — > F q } be a linear afnne-invariant family of functions. Note that every member 
of {F™ — >• F q } can be written uniquely as a polynomial m¥ q [xi,X2, ■ ■ ■ , x n ] of degree at most q — 1 
in each variable. For a monomial Y[7=i x t l over n variables, we define its degree to be the vector 
d = (di, d,2, ■ ■ ■ , d n ) and we define its total degree to be Y^7=i^i- For a function / : F™ — s> F q 
we denote its support, denoted supp(/), to be the set degrees in the support of the associated 
polynomial. I.e., supp(/) = {d € {0, . . . , q — l} n |<>j 0} where f(x) = Yjd c l xd - The degree set 
Deg(J 7 ) of F is simply the union of the supports of the functions in J 7 , i.e., Deg^) = U/ g jFSupp(/). 

While the degree set of the Reed-Muller codes are natural to study, they are also natural in 
more general contexts. The following lemma from [KS07J says that every affine-invariant linear 
property from F™ to F q is uniquely determined by its degree set. 

Lemma 2.5 (Monomial extraction lemma, [KS071 Lemma 4.2]). Let T C |F™ — > F g } be an affine- 
invariant linear property. Then T has a monomial basis, that is, J- is the set of all polynomials 
supported on monomials of the form x d where d G Deg(J-"). H 

One main structural feature of the degree sets of affine-invariant linear properties is that they 
are p- shadow- closed. Before giving the definition of a shadow-closed set of degrees we need to 
introduce a bit of notation. For a pair of integers a, b let a = ^ ■ ajp 3 , b = ^ ■ bjp 3 be their base-p 
representation, respectively. We say that b is in the p-shadow of a, and denote this b < p a, if bj < aj 
for all j. For a pair of integer vectors d = (d\, d<i, ■ ■ ■ , d n ), e = (ex, e-2, ■ ■ ■ , e n ) we say that e < p d if 
< di for every i. 

Definition 2.6 (Shadow-closed set of degrees). For a vector of integers d = (dx,d2, ■ ■ ■ ,d n ) of 
length n, the p-shadow of d is the set Shadow p (d) = {e = (ex, &2, ■ ■ ■ , e n ) I e < p d}. For a subset 
S of integer vectors of length n we let Shadow p (5) = |J^ e5 Shadow p (d). Finally, we say that S is 
p- Shadow- closed if ShadoWp(S') = S. 

The following lemma from |KS07j says that the degree set of every affine-invariant linear prop- 
erty over F™ is p-shadow-closed. 

Lemma 2.7 (Monomial spread lemma, [KS071 Lemma 4.6]). let T C {F q n — > F q } be an affine- 
invariant linear property. Then Deg(J-") is p-shadow- closed. 

A central element used in the proof of the above lemma and other aspects in the study of 
affine-invariant linear properties is Lucas's theorem, which we also need. 

Theorem 2.8 (Lucas's Theorem). The monomial coefficient f*M is non-zero mod p if and only if 
i < p n. 

2 Our language is somewhat different from that of |KS07| . After translation, their lemma says that all monomials 
x are contained in T. The other direction saying T is contained in the span of such monomials is immediate from 
the definition of Deg(J r ). 
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The fact that the degree set of a linear affine-invariant family is p-shadow-closed motivates the 
notion of a "border" set, the set of minimal elements (under < p ) that are not in Deg(J r ). 

Definition 2.9 (Border). For an affine-invariant linear family T C {F™— >-F g }, its border set, 
denoted Border (J 7 ), is the set 

Border(T) = {e£ {0, . . . ,q — l} n \e Deg(7") but Ve < p e,e' / e,e' € Deg(J")}. 

The relationship between the degree set and the border set of an affine-invariant linear family 
and single-orbit characterizability is given by the following lemma. This lemma says that for an 
affine-invariant linear family, in order to establish /c-single-orbit characterizability it suffices to 
exhibit a /c-constraint whose orbit accepts all monomials of the form x d for d € Deg(J 7 ) and rejects 
all monomials of the form x b for b € Border (J 7 ). It is similar in spirit to Lemma 3.2 of [BGM + fl] 
which shows that a similar result holds for affine-invariant linear properties over ¥ q n. 

Lemma 2.10. Let T C {F™ — > ¥ q } be an affine-invariant linear property and let C be a constraint. 

Then C is a single- orbit characterization of J- if the orbit of C accepts every monomial x d for 
d € Deg(J r ) and rejects every monomial x b for b € Border(J 7 ). 

Proof. We need to show that for every affine-transformation T : F™ — > F™ the constraint T o C 
accepts all functions / £ J, while for every f £ J- there exists an affine-transformation T such that 
T o C rejects /. 

Since the set of monomials x d for d S Deg(J-~) forms a basis for _F, clearly we have that C 
accepts all functions / € T . The fact that J- is affine-invariant implies in turn that for every 
affine-transformation T the constraint T o C also accepts all functions / G 7. 

It remains to show that for every / ^ T there exists an affine-transformation T : F^ — > F" such 
that T o C rejects /. Suppose in contrary that there exists a function f £ J- such that the orbit of 
C accepts /, and let T = {/ : F™ — >• F ? |T o C accepts / for every affine-transformation T}. Note 
that J 7 is a linear affine-invariant property, and that our assumption on / implies that / 6 T . 

Since f ^ J-, and since Deg(J 7 ) forms a basis for J 7 , there exists a monomial x e in the support 
of / such that e ^ Deg(J-~). The monomial extraction lemma (Lemma 12.5)) then implies that x e 
is also contained in T . Let b be a minimal degree (with respect to < p ) such that b < p e and 
b £ Deg(J-"). Then from the definition of the border we have that b £ Border (J 7 ). Furthermore, 
since T is linear and affine-invariant and e E Deg(J-"), the monomial spread lemma (Lemma 12. 7p 
implies that b € Deg(^") and in particular x b € T. But this implies in turn that x b is accepted by 
the orbit of C, a contradiction to our assumption that all degrees in the Border of T are rejected 
by the orbit of C. 

□ 

In order to describe the border of the Reed-Muller family we shall use the following definition. 

Definition 2.11. For integer d, let do, d\, . . . , be its expansion in base-p, i.e., cL's satisfy < dj < p 
and d = YljLo djP 3 Let bi(d) = p % + YljLi ^P 3 ■ 

Note that bi (d) > d for every i and conversely, for every integer e > d there exists an i such that 
bi(d) < p e. The bi(dys are useful in describing the border monomials of the Reed-Muller family, as 
formalized below. 
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Proposition 2.12. For every n,d,q, where q = p s for a prime p, we have 
Deg(RM[n,d,g]) = 



Border(RM[n,d,g]) C 



d = (di, . . . ,d n ) G {0, . . . ,q - l} n \ ^dj < d > and 

3=1 J 

n 

e = (ei, . . . , e n ) G {0, . . . , q — l} n | ^ ej = hi{d) for some < i < s 



Proof. The fact that the degree set contains all d with Y^j=i dj < d is immediate from the defini- 
tions. Now consider / such that Xlj=i fj > d. To verify the correctness of the border, we wish to 
show that there exists e < p f and < i < s such that X^J=i e j = bi(d). Let I be the least index 
such that Yfj=i fj = f> d - Note that f <d + q-l, since fe<q-l. Now let /(°), /W, . . . denote 
the base-p expansion of / and let d^°\ d^ l \ . . . denote the base-p expansion of d. Since f > d, there 
must exist a largest index % such that /W > and for all j > i, f^ = dy\ For this choice of i, 
note that < p / and one can reduce fj's to e^'s so that e < p f and Y^j=i e j = h(d)- 

It remains to be shown that i < s. For this part note that if b{(d) > then bi(d) > 

6j_x(d) Thus for all z > s, we have either bi(d) = b s (d) or bi(d) >b s (d)+p s >d + q. But 

since f < d + q — lit follows that we never need to use i > s. □ 

Combining Lemma 12.101 and Proposition 12.121 we have that Theorem 12.41 follows immediately 
from Theorem 12.131 b elow . 

Theorem 2.13. Let q = p s for a prime p. Then there exists a k-constraint C whose orbit accepts 
all monomials of total degree at most d and rejects all monomials of total degree bi(d) for < i < s, 
for k<3q 4 - (2P- 1 +p- l) ^^(p-i)) . q (d+l)/ q _ 



The rest of this paper will be devoted to proving Theorem 12.131 



3 Canonical monomials and a new constraint 

In this section we introduce the notion of "canonical monomials" of a given degree — very simplified 
monomials that appear in every afiine-invariant linear property containing monomials of a given 
degree. We then give a constraint that rejects canonical monomials of some special degrees, while 
accepting all monomials of lower degrees. Later, in Section HI we show how to use this to build a 
constraint whose orbit accepts all monomials of total degree at most d while rejecting all monomials 
of total degree 6j (d) , which suffices to get Theorem 12.131 

Definition 3.1 (Canonical monomials). Let q = p s for a prime p. The canonical monomial of 
(total) degree d over ¥ q is the monomial Y\i=i x< i % which satisfies 5Tf=i di = d, di = q — q/p for all 
2 <i <£, < di < g — 1 and d\ + q — q/p > q - 1. 

We note that [HSSllj used a different canonical monomial (cf. Definition 4.1., jHSSllj ) for the 
construction of their improved tester for the Reed-Muller codes. Our different choice of canonical 
monomial is needed to construct single-orbit characterizations which improve on those given in 
[HSSllj in terms of the number of queries. The main property of the canonical monomial, that 
we will use in Section 14.31 to prove Theorem 12.131 is that every affine-invariant linear family that 
contains any monomial of total degree d also contains the canonical monomial of degree d. (see 
Lemma I4.8|) . This will imply in turn that if we can find constraints that reject this canonical 
monomial their orbit will reject every monomial of total degree d. 
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3.1 A new constraint on monomials of total degree < p(q — q/p) 

The main technical novelty in our paper is a /c-constraint C that accepts all monomials of total 
degree strictly less than p(q — q/p) in p variables but rejects the canonical monomial of degree 
p(q — q/p) (note that the latter monomial also has p variables) for k = (2 P_1 +p — l)q p ~ l . We state 
the lemma below and devote the rest of this section to proving this lemma. 

Lemma 3.2 (Main technical lemma). For every q which is a power of a prime p there exists a 
k-constraint C which accepts all monomials of total degree smaller than p(q — q/p) in p variables 
and rejects the canonical monomial (in p variables) of degree p(q — q/p) over F g , where k = (2 P_1 + 
p-^qP- 1 . 

It will be convenient for us to represent the constraint C as ap-variate polynomial over ¥ q . More 
precisely, suppose that P(x) is ap-variate polynomial P(x) £ F q [xi, X2, ■ ■ ■ , x p ] that is non-zero on at 
most k points in F^. We associate with P(x) the fc-constraint C = (a, A), a = (a\, . . . , a^) £ (Fq) h , 
X = (Ai, . . . , Afc) € F^, where the vector a consists of all points in Fg on which P(x) is non-zero 
and Xj = P{oij) for all 1 < j < k. Clearly, for every function / : Fg — > F q it holds that 

k 

E-w^)= E p(Pu---,Pp)-f(Pi,~-,Pp) a) 

Thus we reduce the task of finding a fe-constraint which accepts all monomials of total degree 
smaller than p(q — q/p) and rejects the canonical monomial of degree p(q — q/p) to the task of 
finding a p-variate polynomial P(x) G F q [x\,X2, ■ ■ ■ ,x p ] with at most k non-zero points in Fg 
such that Ylpx Pp& q ■ ■ ■ i Pp) ' M(Pi, . . . , (3 P ) = for every monomial in p variables of total 

degree smaller than p(q — q/p) and Ylp^ p p & q •••■> Pv) ' ■ ■ ■ , (3 p ) ^ when M(x) is the 

canonical monomial of degree p(q — q/p). 

We start by describing the polynomial P(x). The best way to describe this polynomial is via 
the notion of directional derivatives. Let / : F q — s> F q be a function. Define the derivative of / in 
direction y G F q as f y (x) = f(x + y) — f(x). Define the iterated derivatives as 

/*,...,«,(*) = (fyu..,y d -i)y d (x) = £ + £<A 

ic[d] ^ iei ' 

Let f(x) be the polynomial f(x) = Xp~ . Our polynomial P(x) will be defined as follows. 

= /,- ; ; i.r ; ,i = Eicb-ni-if^Hxp + EigXi) 9 - 1 (2) 

X\ • • • Xp~l X\ ■ ■ ■ Xp^i 

To see that P(X) is indeed a polynomial we need to show that fxx,...,x p -i(%p) is divisible by 
x\ ■ ■ ■ Xp-\. This follows from the following lemma. 

Lemma 3.3. Let f be a univariate polynomial over F q . Then the polynomial f y (x) is divisible by 

y- 

Proof. Write f(x) = J2d c d x<i - Then 



/„(*) = f{x+y)-f{ X ) = Y,c d {x+y) d -Y,c d x d = Y J ^jz{ d ,) xd ~ t y t -Y. 

d d d i=0 



c d x d 



d>0 



x y ■ 
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Thus all monomials in f y {x) contain the variable y and hence f y (x) is divisible by y. □ 

In order to prove our main technical Lemma [3.21 it suffices to show that the number of non-zero 
points of P{x) in Fq is at most (2 P_1 + p — that it accepts all monomials in p variables of 

total degree smaller p{q — q/p), and that it rejects the canonical monomial of degree p(q — q/p). We 
prove these three claims in Lemmas 13.41 13.61 and 13.81 below, respectively. Given these three lemmas 
our main technical Lemma 13.21 is immediate. We start with bounding the number of non-zeros of 
P{x). 

Lemma 3.4. The number of non-zero points of P(x) in Fq is at most (2 P ~ 1 + p — l)q p ~ l . 

Proof. Let /3 = (Pi, . . . ,f3 p ) € Fq. Suppose first that all first p — \ coordinates of P are non-zero, 
so that the denominator of P(P) is non-zero. Suppose furthermore that all terms of the form 
(A» + Sie/^) 9-1 m ^ ne numerator of P(P) are non-zero. Then in this case we have that 

m _ E.c b -i](-i) |/|+1 • i _ sg (VK-i)* _ Q 
Pi ■ ■ ■ Pp-i Pi--- Pp-i 

Thus we have that whenever Pi, . . . , P p -i are all non-zero, P(P) can be non-zero only if at 
least one of the terms of the form (P p + Yliel Pi) q ~ l m its numerator equals zero. Note that each 
such term has exactly assignments in that make it zero. Since the number of terms in the 
numerator is 2 P_1 , the total number of points in Fq that satisfy that at least one of the terms in 
the numerator equals zero is at most 2 P ~ X • g p_1 . 

Concluding, we have that there are at most 2 p ~ 1 q p ~ 1 vectors P 6 Fq which satisfy that 
Pi,P2, ■ ■ ■ , Pp-i are all non-zero and in addition P(P) ^ 0. Since there are at most (p — l)q p ~ l 
elements P S Fq in which at least one of the first p — 1 coordinates is zero, we conclude that the 
number of elements /? € Fq such that P{P) ^ is at most 2 p - l q p - l + (p-l)q p - 1 = (2 p - l +p-l)q p - 1 . 

□ 

Next we show that the constraint C associated with P(x) accepts all monomials in p variables 
of total degree smaller than p(q — q/p). For this we need the following well-known fact. 

Fact 3.5. Let q be a prime-power, and let i be an integer in {0, 1, . . . ,q— 1}. Then 



0ev q 



— 1 i = q — 1 
otherwise 



Proof. Recall that the multiplicative group of F* is cyclic and let 7 be a generator of this group. 
Then for all i G {0, 1, . . . , q — 2} we have 

^— ' ^-^ 7 — 1 7 — 1 

f3e¥ q j=l ' ' 



whereas for i = q — 1 we have that 



J>-l=£l = g-l = -l. 

/3eF 9 /3GF* 



□ 



9 



Lemma 3.6. Let C be the constraint associated with P{x). Then C accepts all monomials in p 
variables of total degree smaller than p(q — q/p). 

Proof. Let m be a monomial in p variables of total degree d < p(q — q/p). We shall show that 
X^Si B eF m (Pii P2, ■ ■ ■ , Pp) ■ m'(/3i, 02, ■ ■ ■ , P p ) = for every monomial m' in P(x). This will show 
in turn that Ylpi p p e¥ q m {Pii ■ ■ ■ > ftp) ' P{Pii ■ ■ ■ ? ftp) = an d hence C accepts m. 

Let m 1 be a monomial in P(x). First note that all monomials in the numerator of P{x) have total 
degree exactly q—1 and hence all monomials in P(x) have total degree q— 1— (p— 1) = (/— p. Thus m' 
has total degree g— p, and m-m' is a monomial of total degree q—p+d < q—p+p(q — q/p) = p(q — l). 
Since m ■ m! is a monomial in p variables, by pigeonhole principle there exists a variable ^ in m ■ m' 
of degree smaller than q — 1. Without loss of generality suppose that x\ has degree d! < q — 1 in 
m-m', and let m ■ m! = xf ■ n?=2 x f l • 

Thus we have 

e (m-m')G8i,...,/%,)= e ^•n*=(E^)n(E*)=°. 

P!,...,PpeW 9 /3i,...,/3 p GF g i=2 ^/3iGF 9 ' i=2 ^ftGF 9 ' 

where the last equality follows from Fact 13.51 above and the fact that d! < q — 1. 

□ 

We complete the proof of Lemma 13.21 by proving that the constraint C associated with P(x) 
rejects the canonical monomial of degree p{q — q/p). In order to prove this theorem we shall use 
Kummer's Theorem which generalizes Lucas's Theorem (Theorem I2.8P and gives a condition for 
when a multinomial coefficient ( n ) = — ■— nf , ^ mod p. 

^7ii72v>7fc'' 7l'72!-"7fc ! r * 

Theorem 3.7 (Kummer's Theorem, [Kum36j ). Let n, 71, 72, . . . , Jk be integers such that n = 
71 + 72 + • • • + Ik- Then the multinomial coefficient ( 7lj7 ™. ,. i7 J = 7l i 72 "'.. 7fc ! ^ mod P if and only 
if 7l > 72) • • • > Ik sum t° n i n base-p without carry. 

Lemma 3.8. Let C be the constraint associated with P(x). Then C rejects the canonical monomial 
of degree p(q — q/p) over ¥ q . 

Proof. The canonical monomial of degree p(q — q/p) over ¥ q is the monomial m = Y]a=i x t Q ^ '■ 
Let m! = nf=i x i^ P 1 ■ We claim that Ylpi a gF (m • m')(Pi, . . . , P p ) 7^ while for every other 
monomial m" 7^ m! in the support of P(x) it holds that Ylfa p P &¥ q ( m ' m ")(Pii ■••■> ftp) = 0- Thus 
in order to prove the lemma it will suffice to show that the monomial m! is in the support of P(x). 
We start by showing that J2p 1 ,...,p p & q ( m ' ™>')(fii, . . . , P p ) / 0. 

E (m-m>m,...,Pp)= e fiPr 1 =fl(j2^r 1 ) = (-^ p ^o, 

p 1 ,...,p P ew q p u ...,p p & q i=i i=i ^Pie¥ g ' 

where the last equality follows from Fact 13.51 above. 

Next we show that for every monomial m" 7^ m' in the support of P(x) it holds that 
Sft p P e¥ q ( m ' m "){Pii ■ ■ ■ iPp) = 0- Let m" 7^ m! be a monomial in the support of P(x). Then 
m" is a monomial of total degree q — p and the fact that m" 7^ m! implies that m" has a variable 
of degree smaller than (q — p)/p = q/p — 1. Without loss of generality suppose that the variable x\ 
has degree smaller than q/p — 1 in m" and note that this implies that the variable x\ has degree 
d' < q — 1 in m • m" . Let m ■ m" = xf ■ Y[ P =2 x t l ■ Then we have 

E (rn.m»)(p 1 ,...,p p )= £ pf f[fjf< = f £ Pf') f[ ( E ^) = °> 

P u ...,P P & q Pi,...,p p £¥ q i=2 ^Pi& q ' i=2 ^Pi£¥ q ' 
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where the last equality holds since X^ieF, (3f = due to Fact [33] above and the fact that d! < q—1. 

We have shown that £Tg g gF (m-m')(/?i, . . . , (3 p ) ^ while for every other monomial m" ^ m' 
in the support of P(x) it holds that Ylfa /3 p eF 9 ( m ' m ")(Pii ■ ■ ■ iPp) = 0> an d hence in order to 
prove the lemma it suffices to show that the monomial m' is in the support of P(x). This happens 
in turn if and only if the monomial m = x q ^ p 1 nf=2 x i ls m ^ ne numerator of P(x). Note that of 
all terms of the form {x p + Yliei x i) 9 ~ 1 ^ n the numerator of P(x), the monomial m can only belong 
to the support of (x p + X)ie[p-i] a^) 9 " 1 = [x\ + X2 + . . . + x p ) q . Thus it suffices to show that the 
monomial rh belongs to the support of (x\ + xi + . . . + x p ) q ~ l . 

In order to show the above we resort to Kummer's Theorem. Expanding (x\ + X2 + . . . + x^) 9 " 1 
we have that the coefficient of the monomial rh is ( 71 9 ~ 7 ) for 71 = g/p — 1 and 7, = g/p for all 
2 < i < p. Noting that 71 , . . . , 7 P sum to q—1 without carry in base-p, Kummer's Theorem implies 
that ( 71 <? ~ 7 ) is non-zero mod p. This implies in turn that rh is contained in the support of the 
polynomial (x\ + X2 + . . . + x p ) q ~ l , thus completing the proof of the lemma. 

□ 

Given Lemmas 13. 4i 13.61 and 13.81 the proof of Lemma 13.21 is immediate. 

Proof of Lemma \3.Sk Let P(x) be the polynomial given in (J2]), and let C be the constraint on 
{Fq — >• Fq} associated with P{x). From Lemma 13.41 we have that the number of non-zero points of 
P{x) in Fq is at most (2 P_1 +p— l)q p , and hence C is a ((2 P_1 +p— l)q p ~ 1 ) -constraint. Lemma 
13.61 implies that C accepts all monomials of total degree smaller than p(q — q/p), while Lemma 13.81 
implies that C rejects the canonical monomial of degree p(q — q/p). □ 



3.2 Tightness of our analysis 

Next we show that the upper bound on the number of non-zero points of P(x) in Fq given in Lemma 
13.41 is essentially tight. 

Lemma 3.9. The number of non-zero points of P(x) in F p is at least 

(2 p ~ 1 -p- l)^- 1 - 2 p - 1 (2 p ~ 1 - l)q p - 2 . 

Proof. We will show that the numerator of P(x) is non-zero for at least 2 p ~ 1 q p ~~ 1 — 2 P ~ 1 (2 P_1 — l)q p ~ 2 
elements in F p . Since the denominator of P(x) is zero for at most (p — l)q p ~ l elements in F^ this 
will show that P(x) is non-zero for at least 2 p ~ 1 q p ~ 1 — 2 P ~ 1 (2 P ~ 1 — l)q p ~ 2 — (p — points in 

F p . 

Let f3 = (/3i, . . . , (3 p ) be a random point in Fq. Let E be the event that the numerator of P((3) is 
non-zero. Our goal will be to show that Pr[i£] > 2 P ~ 1 /q — 2 P ~ 1 (2 P ~ 1 — l)/q 2 . For a subset I C. [p — 1] 
let Ei be the event that (/3 P + fii) q = 1- Let E' be the event that exactly one of the events 
Ej holds. Clearly, E' C E and hence it suffices to show that ¥r\E'\ > 2 p ~ 1 /q - 2 p ~ 1 (2 p - 1 - l)/q 2 . 

Note that Pr[£ 7 ] = 1/q for all / C [p - 1] and Pr[J5j n Ej) = 1/q 2 for all / ^ J, I, J C [p - 1] 
since f3 p + Yliel & = ^ anc ^ $v + Sje j = are linearly independent linear equations. 
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Thus have that 

Pr[E'] > ]T (pr[Ej]- ]T Pr^nEj]) 

IC\p-l] ^ JC\p-l],JjtI ' 

= E (v*- E v. 2 ) 

IQp-l] V JQ P -l],J^I J 

= 2^(1/9 - (2^ -l)/g 2 ) 
= 2 p - 1 /<7-2 p - 1 (2 p - 1 _ i)/ g 2 

□ 



4 Proof of Theorem [2331 

In this section we use Lemma 13,21 to prove Theorem 12.131 This part is done in several steps. In 
Section we extend the constraint from the previous section to get constraints rejecting canonical 
monomials of degree d+1, while accepting all monomials of total degree at most d for an arbitrary 
integer d. Next, in Section [4.21 we combine the various constraints from the previous step to find 
one constraint which rejects all the canonical monomials of degree bi(d) for every d, while accepting 
all monomials of total degree at most d. Finally, in Section 14. 3\ we prove Theorem 12.131 In this 
part, we use some of the standard facts about afnne-invariance to conclude that the orbit of the 
constraint from the previous step must reject all monomials x b for b G Border(RM[n, d, q\) while 
accepting all monomials x d for d G Deg(RM[n, d, q\). 



4.1 Rejecting canonical monomials of arbitrary degree d + 1 

We start by showing how the constraint guaranteed by Lemma 13.21 can be turned, via an operation 
on constraints that we call the convolution operation, into a constraint which rejects the canonical 
monomial of degree d+1 and accepts all monomials of total degree at most d for an arbitrary 
integer d. This step is given in the following lemma. 

Lemma 4.1. For every q which is a power of a prime p, and for every integers d, n there exists a 
k-constraint C on {F™ — > ¥ q } which accepts all monomials of total degree at most d and rejects the 

canonical monomial of degree d+1 over ¥ q for k < q 2 ■ {2 p ~ l + p — l) ^ d+l " > ^ q ^ p 1 ^ . q( d + l )/i . 

For the proof of the above lemma first introduce the convolution operation. For a pair of 
vectors 7 = (71, . . . ,7 ni ) and 7' = (7^ . . . ,7^) let 707' = ( 7l , . . . ,7^,7^, . . . ,7^) denote their 
concatenation. 

Definition 4.2 (Convolution of constraints). Let C\ = ya^\ j be a /ci-constraint on 

{F™ 1 -> ¥ q }, and let C 2 = (a (2) , j^f } be & ^-constraint on {F™ 2 -)■ ¥ q }. Their convolution 

C = Ci ® C 2 is the (h ■ /^-constraint C = (a, {A^)}^ i2=1 ) on {F" 1+rt2 -»F ff }, where 
a G (F"i+ n 2) fc i xfc 2 and \ iuh ) G (¥ q ) klXk2 for all 1 < i x < r lt 1 < i 2 < r 2 , and are defined as 
follows: 

(1) (2) \ \(1) \(2) 

for all 1 < ji < k±, 1 < j 2 < k 2 , 1 < i\ < r±, 1 < i 2 < r 2 . 
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Proposition 4.3. Let C\ be a ki-constraint on {F™ 1 — >■ F g } which accepts all monomials x d with 
d G D\ and rejects all monomials x b with b G B\, and let C2 be a k2- constraint on {F™ 2 — > F ty } 

which accepts all monomials x d with d G D2 and rejects all monomials x b withb G B2. Then 
C\ (g> C2 is a (fci • k^)- constraint on {F™ 1+ri2 — > F g } which accepts all monomials x dl ° e2 and x £l ° d2 
where d\ G D\, c?2 G D2 and e± G {0, . . . , q — l} ni , e2 € {0, . . . , q — l} n2 are arbitrary, and rejects 
all monomials of the form x bl ° b2 where b± G B\ and 62 G i?2- 

Proof. Let e = ~e~\ o e.2 where ei G {0, . . . , q — l}™ 1 , e2 G {0, . . . , q — I} 712 . Then for every 1 < i\ < n, 
1 < i 2 < r2 we have that 



fcl fc2 fcl fc2 

E E A (u,i 2 ),o' 1J2 )(«o 1J2 )f = EE A Si • A S J2 • ° 4?)" 

j'i=i j2=i ii=ij 2 =i 

ii=i 7 v i 2 =i 7 

Hence C accepts all monomials of the form x dl ° e2 and x eiod2 where d\ G D\, d2 G D2 and 
ei G {0, . . . , q — l}™ 1 , ~e~2 G {0, . . . , q — l}" 2 are arbitrary and rejects all monomials of the form x bl ° b2 
where b\ G B\ , 62 G B2 . 

□ 

The convolution operation, applied to the constraint given by Lemma 13.21 suffices for proving 
Lemma 14,11 when p(q — q/p) divides d+ 1. However, since this is not always the case we need to 
consider also testing univariate monomials of degree at most q — 2. The following lemma covers 
this case. 

Lemma 4.4 (Testing univariate monomials of degree at most q — 2, (cf. |RS96j )). Let d be an 

integer in {0, 1, . . . , q — 2}. Then there exists a (d + 2)-constraint C on {¥ q — > ¥ q } which accepts 
all monomials x e for e < d and rejects the monomial x d+1 . 

Proof. Let C = (a, A) be the (d + 2)-constraint defined as follows. Let ai, . . . , ad+2 £ F g be distinct 
elements (note that they do exist since d + 2 < q). Let A = (Ai, . . . , \d+2) G ¥ d+2 be a non-zero 
vector satisfying Ylt=i ^i a l = f° r all £ G {0, ... , d}. Note that such a vector A exists since each 
of the constraints above is a homogenous linear constraint on A and there are only d + 1 such 
constraints and d + 2 var iables. We claim that ^=1 ha d+l ^ 0, since if it were then A would be 
in the null space of the Vandermonde matrix [ajJ^i^^Q . Thus C rejects x d+1 while accepting x e 
for every e < d. □ 

Given Proposition 14.31 and Lemma 14.41 we are ready to prove Lemma 14.11 

Proof of Lemma \4-1\ Write d+1 as d+1 = r+£(q — q/p) where < r < q — 1 and r + q — q/p > q — 1. 
Write i = i'p + r' where < r' < p. Let C\ be the (r + l)-constraint guaranteed by Lemma 14.41 for 
the degree r — 1, and let C2 be the (q — q/p+ l)-constraint guaranteed by the same lemma for the 
degree q — q/p — 1. Let C3 be the /s'-constraint guaranteed by Lemma [3721 Finally, let C be the 
((r + 1) • (q — q/p+ l) r • (ky )-constraint which is the convolution of C\ with r' copies of C2 and £' 
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copies of C3. That is, C = C\ ® C® r ® Cj'. We claim that C accepts all monomials of total degree 
at most d and rejects the canonical monomial of degree d + 1 (if the arity of C = (a, {Ai} i _ 1 ) is 
smaller than n then we extend C to be of arity n by concatenating sufficient number of l's to each 
element otj in the vector a). 

To see this suppose first that m = xf 1 ■ ■ ■ xff is a monomial of total degree at most d. In this 
case we have that either one of the variables X2, ■ ■ ■ , xg+i is of degree smaller than q — q/p or that 
the variable x\ is of degree smaller than r. From Proposition 14.31 this implies that the constraint C 
accepts the monomial m. Suppose on the other hand that m is the canonical monomial of degree 
d+1. Then in this case we have that all of the variables x 2 , . . . , x^ + \ are of degree q — q/p and the 
variable x\ is of degree r. Hence Proposition 14.31 implies that C rejects the monomial m. 

Finally note that the locality of C is k = (r+l)-(q—q/p+l) r -(k') where k' = (2 p ~ l +p—l)q p ~ 1 , 
£' < (d+l)/((q — q/p)p) , r < q — 1 and r' < p. Using the following series of simplifications, we can 
bound k as claimed. 

k = {r + l)-(q-q/p+l) r ' ■{(2 l> - 1 +p-l)q p - 1 f 

< q.(qf .((2P- 1 +p-l)qP- 1 f 
= g .( 2 P-l +p _ 1 f . g r'+(p-lK 

< g.^+p-lf . q ((P-V/P)-t+l 

< q 2 ■ (2 P_1 + P - /{(q-q/p) P ) . q ((p~l)/ P y(d/(q-q/p)) 
= q 2 ■ (2 P ~ 1 +p- l)(d+l)/{q(p-l)) . q (d+l)/q_ 

□ 



4.2 Rejecting all canonical monomials in the border simultaneously 

Next we show for every integer d the existence of a fc-constraint which accepts all monomials of 
total degree at most d and rejects all the canonical monomials of degree bi(d) for < i < s 
simultaneously. For proving this we shall use the union operation on constraints defined as follows. 
For an integer k, let 0^ denote the all-zeros vector of length k. 

Definition 4.5 (Union of constraints). Let C\ = , | | j be a k\ -constraint on 

{F"^F f/ } and let C 2 = ^a (2) , {if } }^ ^ J be a ^-constraint on {F™ ¥ q ]. Their union 

C = Ci U C 2 is the (jfei + ^-constraint C = (a, {a?^}^ U {a?^}^ J on {F™ ¥ q } defined 
by 

a = o a^ 2 \ 
= A 4 (1) o fc2 for all 1 < i < n, 

and 

X {2) = kl o aS 2) for all 1 < i < r 2 . 

Proposition 4.6. Lei Cx &e a constraint which accepts all monomials with degrees in D\ and 
rejects all monomials with degrees in B\, and let C2 be a constraint which accepts all monomials 
with degrees in D 2 and rejects all monomials with degrees in B 2 . Then C±L)C 2 accepts all monomials 
with degrees in D\ n D 2 and rejects all monomials with degrees in B\\J B 2 . 
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Proof. For every degree d, 



ki+kz ki _ 



E AS^ = ^Ag(a{ i y fo ralll< i <r 1) 

3=1 3=1 



and similarly 



ki+k2 k 2 _ 

E AS ) af = ^Ag(af) d foralll<,<r 2 . 

3=1 3=1 

Thus the constraint C accepts monomials of degree d if and only if both C\ and accept the 
monomial of degree d. Hence C accepts all monomials with degrees in D± n L>2 and rejects all 
monomials with degrees in B\ U B2 ■ 

□ 

Given the above proposition we can now build a constraint which accepts all monomials of total 
degree at most d while rejecting all the canonical monomials of degree bi(d) for < i < s. 

Lemma 4.7. Let q = p s for a prime p and let n, d be arbitrary positive integers. Recall the definition 
of the integers bi(d) given in Definition \2.11\ Then there exists a k-constraint C on {F™ — > ¥ q } 
which accepts all monomials of total degree at most d and rejects all canonical monomials of degree 
h{d) forO<i<s, where k < 3q 4 ■ (2P" 1 +p - l) C^ 1 )/^ 1 )) . g («*4-i)/5. 

Proof. For all < i < s let Cj be the fcj-constraint which accepts all monomials of total degree at 

most bi(d) — 1 and rejects the canonical monomial of degree bi(d) over ¥ q as guaranteed by Lemma 
Owith/ti < g 2 .(2P- 1 +p-l)( d + 1 +'?)/(9(p-i)).g(^+i+9)/9 < 3g 3.( 2 P-l + p_i)(d+l)/(9(p-l)). g (d+l)/g_ Let 

C = U- =0 °i- Then C is a ^-constraint for k = ]P- =0 h < 3q* ■ +p- 1)(^+i)/(9(p-i)) . g («*+l)/«. 

Proposition 14.61 implies that C accepts all monomials of total degree at most d and rejects all 
canonical monomials of degree bi(d) for < i < s, giving the claimed assertion. □ 



4.3 Rejecting all monomials in the border 

In order to complete the prof of Theorem 12.131 we show that for the constraint from Lemma 14.71 
which accepts all monomials of total degree at most d while rejecting all the canonical monomials 
of degree bi(d), its orbit must accept all monomials x d for d 6 Deg(RM[n, d, q]) while rejecting x b 
for b € Border(RM[n, d, q]) and thus satisfies the conditions of Theorem 12.131 
We start by stating a simple property of canonical monomials. 

Lemma 4.8. Let m be a monomial of total degree d, and let T be the minimal linear affine-invariant 
family containing m. Then T contains the canonical monomial of degree d over ¥ q . 

For the proof of the above lemma we shall need the following lemma. 

Lemma 4.9. Let q = p s for a prime p, and let m = x^x 1 ^ 2 be a monomial such that < d\ < q — 1, 
< cfo < q — 1 and k < p di- Let T be the minimal affine-invariant linear family containing m. 
Then the monomial m' = Xi 1+k X2 2 ~ k is contained in T . 

Proof of Lemma \4-9[ Let T be the affine-transformation T(x±, x%) = {x\, X\ + x?)- Then 
rn d,!/ . \d 2 d 1 ( i <k-i\ di+i d 2 -i 

m o T = x x {x\ + X2) = x 1 1 1 2__, I . 1 ^1^2 ) = 2—< \ ■ j x i ^2 • 
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Prom Lucas's Theorem (Theorem 12. 8p we have that (^ 2 ) ^ mod p if and only if i < p d,2- Thus 
we have that all monomials of the form xf 1+l X2 2 ~ l such that i < p d-2 are contained in the support 
of m o T. Since k < p d>2 we have that m o T contains the monomial m! in its support. Since T is 
afhne-invariant we have that m o T is contained in T and hence the monomial extraction lemma 
(Lemma I2.5P implies that ml is contained in T . □ 



Next we prove Lemma 14.81 based on Lemma [ 
Proof of Lemma \J78[ Write d = £{q — q/p) + r' where r' < q — q/p. Let m = Yl7=i We start by 



showing that J- contains a monomial Y]a=i X C which satisfies d\ > q — q/p for every 2 < i < £ + 1. 

We shall apply lemma 14.91 iteratively. For a monomial ml = YYi=\ x t % let c(m') = 
J2i=2 mm {0, (q — q/p) — ej}. Clearly, c(m') = if and only if > g — g/p for all 2 < i < £ + 1. 
If m satisfies that di > q — q/p for all 2 < i < £ + 1 then we are done, hence assume that there 
exists 2 < i < £ + 1 such that di < q — q/p. If there exists a degree j £ {1} U {£ + 2, . . . , n} such 



that dj > let p k be such that p k < p dj. Lemma 14.91 implies that mi := m ■ xj p is contained 
in T . Otherwise, since Y17=l di = d there exists j £ {2, . . . ,£ + 1} such that dj > q — q/p. Note 
that the base-p representation of q — q/p is (q — q/p) = (p — 1) • p s_1 and hence the fact that 
> q — q/p implies the existence of p k < p dj such that q — q/p + p k < p dj. Lemma 14.91 implies 

that m\ := m ■ x? xj p is contained in T in this case as well. Note that in both cases we have 
that c(m±) < c(m). Also, since di < q — q/p we have that di + p k < q — q/p + q/p < q. Hence all 
variables in m\ have degree at most q — 1 (we mention this fact since this will allow us to apply 
Lemma 14.91 iteratively) . 

If all variables X2, ■ ■ ■ ,%e+i in m\ have degree at least q — q/p then we are done. Otherwise 
repeat the same process as previously to obtain a monomial ni2 £ J~ such that the degrees of all 
variables in m,2 are at most q — 1 and c{m2) < c{m\). Continuing this way we have that at the i-ih. 
step either all variables X2, ■ ■ ■ , a^+i in wij_i have degree at least q — q/p and hence we are done or 
that we obtain a monomial m; £ T such that the degrees of all variables in m,j are at most q — 1 and 
c{rrii) < c(mj_i). Since the function c(mj) strictly declines at each step the process must terminate 
eventually, and when it terminates we have that mj_i satisfies that all variables X2, • • • in it 

have degree at least q — q/p. 

We have just shown that T contains a monomial m! = Y\/i=i x i 1 ' w h ere d^ > q — q/p for all 
2 < i < £ + 1. Next we claim that the monomial rh = niLi x i* which satisfies d\ = r', d~i = q — q/p 
for all 2 < i < £ + 1 and di = for all £ + 2 < i < n is contained in T (note that m is the canonical 
monomial of degree d if and only if r' + q — q/p > q — 1). To see this note that if m! = m then 
we are done. Otherwise we must have that d[ < r'. As was the case previously this implies the 
existence of either £ + 2 < j < n and an integer k such that p k < p d'- or 2 < j < n such that 

k k 

q — q/p + p k < p d'j. Lemma [4. 91 implies that the monomial m! ■ x\ x~ p is contained in T . Note that 
in the latter monomial the degree of the variable x\ increased, but all variables X2, ■ ■ ■ ,xi + i are 
still of degree at least q — q/p. Continuing this way we conclude that the monomial m is contained 
in T . 

Finally, note that if r' + q — q/p > q — 1 then rh is also the canonical monomial of degree d and 
hence we are done. Otherwise we have that q — q/p < p di+\ and hence Lemma [4.91 implies that the 
monomial rh ■ x\ 9 ^ p ■ q ^ p ^ is contained in T . The proof is completed by noting that in this 

case the latter monomial is the canonical monomial of degree d. 

□ 
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Lemma 4.10. For prime power q = p s and integers n, d, let C be a constraint on {F™ — > ¥ q } that 
accepts all monomials of total degree at most d and rejects the canonical monomials of degree bi(d) 
for all < i < s. Then the orbit of C accepts all monomials x d with d G Deg(RM[n, d, q\) and 
rejects all monomials x b with b G Border (RM[n, d, q\). 

Proof. The fact that C accepts all monomials x d with d G Deg(RM[n, d, q\) is syntactically equiva- 
lent to saying C accepts all monomials of total degree at most d and hence C accepts all functions 
in RM[n, rf, q\. Since RM[n, d, g] is affine-invariant this implies in turn that the orbit of C accepts 
all functions in RM[n, d, q] as well. 

It just remains to show that the orbit of C rejects every monomial m = x b with b G 
Border (RM [n, d, q\). Assume for contradiction that the orbit of C accepts m, and note that from 
Proposition 12.121 we have that m is of total degree bi{d) for some < i < s. 

Let T' be the set of functions accepted by the orbit of C , i.e., 

T' = {/ : F™ —7- ¥ q \T o C accepts / for every amne-transformation T}. 

We have that T' is linear and affine-invariant, and contains m, and so by Lemma [4.8l it also contains 
the canonical monomial of degree b{ (d) . So the orbit of C accepts the canonical monomial of degree 
bi(d) contradicting the hypothesis about C. □ 

Proof of Theorem \2.13l From Lemma 14.71 we have a constraint C of arity k < 3g 4 • (2 P_1 + p — 
!)) _ q(d+i)/q th a ^ acC epts every monomial of total degree at most d and rejects every 
canonical monomial of degree bi(d). By Lemma 14.101 C satisfies the conditions necessary required 
in the theorem statement. □ 
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